H3C SecPath Series

9
Description
Use the firewall http activex-blocking enable command to enable the ActiveX blocking function and add
the default blocking keyword ‘.ocx’ to the ActiveX blocking suffix list.
Use the undo firewall http activex-blocking enable command to disable the ActiveX blocking function.
By default, the ActiveX blocking function is disabled.
Related commands: display firewall http activex-blocking.
Examples
# Enable the ActiveX blocking function.
<Sysname> system-view
[Sysname] firewall http activex-blocking enable
firewall http activex-blocking suffix
Syntax
firewall http activex-blocking suffix keywords
undo firewall http activex-blocking suffix keywords
View
System view
Default level
2: System level
Parameters
keywords: Blocking suffix keyword, a case-insensitive string of 1 to 9 characters. It must start with a dot
“.” and consist of characters 0 to 9, a to z, and A to Z.
Description
Use the firewall http activex-blocking suffix command to add an ActiveX blocking suffix keyword to the
ActiveX blocking suffix list.
Use the undo firewall http activex-blocking suffix command to remove an ActiveX blocking suffix
keyword from the ActiveX blocking suffix list.
You can add a maximum of 5 ActiveX blocking suffix keywords.
You cannot add or remove the default suffix keyword “.ocx” by these commands.
Related commands: display firewall http activex-blocking.
Examples
# Add .vbs to the ActiveX blocking suffix list.
<Sysname> system-view
[Sysname] firewall http activex-blocking suffix .vbs
firewall http java-blocking acl
Syntax
firewall http java-blocking acl acl-number
undo firewall http java-blocking acl